-SpitFire_ DoS Tool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

-SpitFire_ DoS Tool.exe
Size

83KB
MD5

34dd8796d6c1dd4bf6b6937853a7103b
SHA1

5b881f95fb57447746821a1cdea47e93ac37e353
SHA256

406c3dc35e5aec611d4d1144667c56a8a7add971571079e1474906ffe5df7aaf
SHA512

c78ae584ddaffd37ad20892cfce516ab46b0952abb5caec592be0f7fa03b1ba413566b6fa70ea406d9f9ffe0d585af57ae14ada336b6366c3e5fae1256df59f1
SSDEEP

1536:KqdeiPTDWFQSFxCgMLDPY30Y2YtQonK5ZZEbzTHWJjIpsdT/ESC6n8Ec:xei/WKS76G0lYth6M2tIpWrESb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
-SpitFire_ DoS Tool.exe

Files

-SpitFire_ DoS Tool.exe
.exe windows:4 windows x64

b0f3492c324d8b1b540ae9c889a2bb3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

user32

IsChild

gdi32

BitBlt

comctl32

InitCommonControls

Sections

.MPRESS1
Size: 26KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE